Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/QCkkYjFq9c6mgxILcR9kTSwVQjo.roa
File: QCkkYjFq9c6mgxILcR9kTSwVQjo.roa (raw, json)
Hash identifier: lHbNAoEn0ZGcQET4y71CajiLWYoBPd9SUiepDy4NWuw=
Subject key identifier: 40:29:24:62:31:6A:F5:CE:A6:83:12:0B:71:1F:64:4D:2C:15:42:3A
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018CC9BCBF81433E01E9F241C68008F7233F
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/QCkkYjFq9c6mgxILcR9kTSwVQjo.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133398
IP address blocks: 79.141.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:81:43:3e:01:e9:f2:41:c6:80:08:f7:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40292462316af5cea683120b711f644d2c15423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:23:07:98:61:34:0d:2b:8c:d9:bd:da:28:
67:0c:17:9a:28:ec:bf:8e:82:52:31:13:eb:82:9b:
21:e1:57:25:3d:63:35:29:e8:34:81:02:24:35:ed:
c0:11:b2:9e:e9:d8:2b:6e:ef:61:73:e3:b6:5b:11:
a9:ae:47:03:bc:f2:32:9a:32:70:89:fd:5f:1c:98:
d7:48:39:f8:ad:da:70:f0:95:4a:08:b5:c4:b9:b4:
f1:c4:21:34:11:8d:fd:b9:d8:f0:8e:61:b2:c2:d8:
86:3e:63:40:cd:80:30:0f:bf:ef:02:55:92:94:85:
6f:e4:51:d0:10:e5:bf:fd:b4:e0:4e:85:ba:8b:81:
ab:18:8d:5c:a0:c7:09:62:e9:1b:fd:59:8c:b1:9e:
0e:55:af:ee:18:18:ab:8f:0a:19:49:47:ba:bc:f9:
5b:ca:42:01:74:bf:8f:c3:14:93:53:65:6e:9a:6e:
50:33:0f:b8:6a:2b:2e:f1:7d:0d:b5:c2:c3:3d:c2:
76:3b:5a:da:59:02:57:e1:9e:59:f8:17:ae:67:4d:
ab:c7:50:68:0a:70:c8:2b:23:40:1a:2d:3b:89:de:
59:08:5b:4a:75:71:32:2f:b1:00:26:b2:c8:be:88:
e5:13:da:3c:8f:3e:1f:c9:76:61:41:ed:2e:9e:3e:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:24:62:31:6A:F5:CE:A6:83:12:0B:71:1F:64:4D:2C:15:42:3A
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/QCkkYjFq9c6mgxILcR9kTSwVQjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
16:53:34:be:46:c7:2f:0d:64:5c:28:7f:ee:16:fe:84:f5:fa:
24:b1:e9:fe:5e:d3:82:2c:07:02:8d:ca:ee:38:07:67:65:b9:
fd:2c:68:32:83:3a:42:a5:d3:61:44:71:8c:6c:d7:33:6c:71:
a8:4e:18:7b:0b:b3:90:61:b5:69:43:90:af:a5:92:57:d7:01:
46:fe:54:9e:be:74:dc:da:42:00:a0:45:a2:c9:ee:bb:d1:9c:
e1:11:a9:b4:40:d9:a7:12:17:6e:d8:f4:c7:59:1b:73:ec:10:
16:65:81:78:0b:b8:76:c5:44:7e:8f:8b:31:c4:08:e8:28:ae:
0c:00:2c:3b:fb:a2:13:4b:10:1d:9c:52:5e:7f:cf:62:1d:85:
01:2c:01:90:21:21:c4:cd:3a:14:16:79:df:e8:df:bf:1f:59:
33:c7:4a:6d:08:d3:2a:76:ca:99:65:88:79:11:5e:d7:a2:eb:
ca:f3:48:b9:de:0b:41:9d:09:77:4e:c1:67:2a:0f:79:3f:21:
fe:86:9b:d6:4e:08:61:28:7b:ff:b1:3c:1f:0f:e9:e0:90:32:
dd:a2:30:36:d4:35:12:81:60:02:54:71:4a:5c:7b:8f:97:e5:
31:fb:50:51:06:74:a9:6c:0f:56:a8:b9:ba:4f:7c:9b:33:64:
fa:4a:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:30:58 2024 by rpki-client on console-ams.rpki-client.org